Systems and methods for workload security in virtual data centers

摘要

A computer-implemented method for workload security in virtual data centers may include (1) identifying a virtual data center that hosts a plurality of workloads sharing a common computing infrastructure, (2) identifying a workload within the plurality of workloads that is subject to a sensitivity assessment that pertains to an application of at least one security policy to at least one computing resource used by the workload, (3) performing the sensitivity assessment for the workload based at least in part on an attribute of an allocated resource within the common computing infrastructure provisioned to the workload, and (4) applying the security policy to the computing resource based at least in part on the sensitivity assessment for the workload. Various other methods, systems, and encoded computer-readable media are also disclosed.

主权项

1. A computer-implemented method for workload security in virtual data centers, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:
identifying a virtual data center that hosts a plurality of workloads sharing a common computing infrastructure; identifying a workload within the plurality of workloads that is subject to a sensitivity assessment, the sensitivity assessment pertaining to an application of at least one security policy to at least one computing resource used by the identified workload; performing the sensitivity assessment for the identified workload by determining that a first resource that provides computing infrastructure within the common computing infrastructure and that is provisioned to the identified workload shares a portion of the common computing infrastructure with a second resource that provides computing infrastructure within the common computing infrastructure and that handles sensitive data and determining that the identified workload is sensitive because the first resource is provisioned to the identified workload; and applying the security policy to the at least one computing resource based at least in part on the sensitivity assessment for the identified workload.